It looks like someone has accessed your account via a password stolen elsewhere.

I've reverted the email change and randomized the password. Use www.crunchyroll.com/resetpw to reclaim your account.

You should set an entirely new password for Crunchyroll, and different new passwords for any other site you have used with the same credentials.
Also check the devices page on Crunchyroll for any devices you do not recognize and remove those.

The fraudulent purchase has been canceled and refunded. The money should already be back on your PayPal account.